$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: 4ppRmKTnxCEEB5F/FCx3/HnkHQr/YJEyOArBCAFGGUc= Subject key identifier: AA:3F:E6:2F:64:E9:69:E1:D1:0B:95:B2:2B:9A:6A:71:FD:23:D1:E0 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 4FD055700C71D2C6A629587A43FF6AB40CE5F4C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: D3 Signing time: Sat 23 Aug 2025 09:01:23 +0000 Manifest this update: Sat 23 Aug 2025 08:56:23 +0000 Manifest next update: Tue 26 Aug 2025 13:44:23 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: 7Wv6O5xK2FTcsYEWbeLITz0FxFX+jVqhqSDjX+3SzZ4=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d0:55:70:0c:71:d2:c6:a6:29:58:7a:43:ff:6a:b4:0c:e5:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Aug 23 08:56:23 2025 GMT Not After : Aug 26 13:44:23 2025 GMT Subject: CN=AA3FE62F64E969E1D10B95B22B9A6A71FD23D1E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:76:d6:f6:1e:49:5d:58:13:5f:12:f0:44:32: 10:5d:6f:d0:ae:50:06:c3:7a:b3:ca:5c:76:08:18: fb:70:f5:9f:86:b6:e1:77:0a:3c:af:a9:82:3b:31: ea:70:b3:ef:0b:3d:a4:85:9c:41:3e:1e:c6:fb:aa: a2:18:f6:99:bb:50:a3:4a:01:15:e3:bf:ac:06:47: 80:0c:f9:5b:32:ff:cc:55:ce:70:f0:e6:b5:11:66: 82:c5:8b:58:56:10:11:7d:99:ab:ef:56:aa:64:32: d2:f2:be:eb:a4:b2:ab:0f:82:d4:ec:22:44:b9:b7: 15:a9:8f:6a:59:b8:23:d6:7f:e7:cd:ca:8e:e5:8e: 39:5c:91:f4:c2:54:52:43:11:e9:dc:ae:a2:5b:f2: 25:14:f4:b8:42:d1:44:1d:94:2b:31:7e:ce:32:6f: f3:52:75:7c:d8:b0:cc:95:69:85:68:1d:9b:83:64: 59:9f:23:81:00:a1:1b:57:3f:a7:e5:78:21:0d:de: 72:75:9c:ee:c7:c9:f6:62:25:dd:69:96:55:5b:84: 36:cd:fc:60:fa:8f:02:bf:2b:e3:f3:b8:79:20:f1: 46:ec:b9:61:04:ed:75:67:f2:6b:a1:94:fa:86:db: 90:65:46:64:c0:d7:68:ee:3f:10:68:84:a3:2b:d8: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3F:E6:2F:64:E9:69:E1:D1:0B:95:B2:2B:9A:6A:71:FD:23:D1:E0 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:48:7c:3f:5b:f5:a6:99:fd:99:52:82:bc:16:80:8e:63:be: e5:23:ad:7e:e8:6e:9d:f0:1e:e1:5b:7c:a9:d9:95:81:7d:fd: 5a:0b:12:07:16:a9:34:b3:3c:9d:fd:9a:49:35:2e:a9:d5:4d: 4a:82:5e:d9:aa:17:3d:6b:46:bb:76:dd:6d:91:3f:d9:76:96: b2:88:df:c4:97:ae:06:05:39:cf:c6:52:c9:6b:08:12:13:90: 21:4f:dd:81:d7:64:70:5f:a7:56:31:65:67:62:3e:c5:b7:80: 38:5a:85:a9:a0:9a:15:c7:fe:7a:b8:09:28:98:51:ad:9b:a2: c6:ce:f0:cc:cb:bf:de:dc:c2:f7:28:88:20:8c:2f:71:a5:c7: 40:7a:39:c0:31:92:13:0f:bf:af:63:83:76:32:e5:37:29:be: f1:62:a5:7c:b7:17:e7:57:78:d2:80:c6:1d:38:57:48:e6:8c: 0e:4a:2e:82:3f:57:e7:8e:46:37:ad:9b:d8:8a:ec:b3:8c:e4: 7c:9e:82:24:21:c3:88:70:47:c0:e7:10:39:52:31:05:00:b8: fc:cb:91:ad:bf:b9:f8:5e:5e:17:b0:52:a1:6c:fd:62:ad:f6: 54:20:33:3b:ba:26:43:16:52:e3:93:82:71:45:0b:c4:d4:94: 4a:59:ef:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9BVcAxx0samKVh6Q/9qtAzl9MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTA4MjMwODU2MjNaFw0yNTA4MjYxMzQ0MjNaMDMxMTAvBgNV BAMTKEFBM0ZFNjJGNjRFOTY5RTFEMTBCOTVCMjJCOUE2QTcxRkQyM0QxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDydtb2HkldWBNfEvBEMhBdb9Cu UAbDerPKXHYIGPtw9Z+GtuF3CjyvqYI7Mepws+8LPaSFnEE+Hsb7qqIY9pm7UKNK ARXjv6wGR4AM+Vsy/8xVznDw5rURZoLFi1hWEBF9mavvVqpkMtLyvuuksqsPgtTs IkS5txWpj2pZuCPWf+fNyo7ljjlckfTCVFJDEencrqJb8iUU9LhC0UQdlCsxfs4y b/NSdXzYsMyVaYVoHZuDZFmfI4EAoRtXP6fleCEN3nJ1nO7HyfZiJd1pllVbhDbN /GD6jwK/K+PzuHkg8UbsuWEE7XVn8muhlPqG25BlRmTA12juPxBohKMr2HhxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqj/mL2TpaeHRC5WyK5pqcf0j0eAwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1IfD9b9aaZ/ZlSgrwWgI5jvuUjrX7obp3w HuFbfKnZlYF9/VoLEgcWqTSzPJ39mkk1LqnVTUqCXtmqFz1rRrt23W2RP9l2lrKI 38SXrgYFOc/GUslrCBITkCFP3YHXZHBfp1YxZWdiPsW3gDhahamgmhXH/nq4CSiY Ua2bosbO8MzLv97cwvcoiCCML3Glx0B6OcAxkhMPv69jg3Yy5TcpvvFipXy3F+dX eNKAxh04V0jmjA5KLoI/V+eORjetm9iK7LOM5HyegiQhw4hwR8DnEDlSMQUAuPzL ka2/ufheXhewUqFs/WKt9lQgMzu6JkMWUuOTgnFFC8TUlEpZ7yM= -----END CERTIFICATE-----Generated at Sat Aug 23 22:50:52 2025 by rpki-client